feat: version ledger settlement contracts

auth/v1/srv.proto

@@ -31,7 +31,9 @@ service AuthorizationService {
   rpc ProcessTFAReq(TFAReq) returns (base.v1.StatusRes) {}
 
   // For HMAC-OTP an initialization step must be added to exchange keys
-  rpc InitTFAReq(InternalIAM) returns (TFAExRes) {}
+  // Deprecated: authenticator-app enrollment was never implemented. Darano
+  // currently supports the ProcessTFAReq/CheckTFACode OTP flow.
+  rpc InitTFAReq(InternalIAM) returns (TFAExRes) { option deprecated = true; }
 
   rpc CheckTFACode(CheckTFAReq) returns (base.v1.StatusRes) {}
 }

ledger/v1/msg.proto

@@ -165,4 +165,54 @@ message ReplayJournalsResponse {
 message HealthResponse {
   bool serving = 1;
   bool database_ready = 2;
+  bool settlement_enabled = 3;
+  bool settlement_ready = 4;
+  int64 settlement_pending = 5;
+  int64 settlement_retryable = 6;
+  int64 settlement_manual_review = 7;
+  int64 oldest_pending_seconds = 8;
+}
+
+message EnqueueSettlementRequest {
+  string source_service = 1;
+  string source_transaction_id = 2;
+  string idempotency_key = 3;
+  string network = 4;
+  // Signed transaction XDR. GL persists and submits this payload durably.
+  string signed_transaction_xdr = 5;
+}
+
+message EnqueueSettlementResponse {
+  string settlement_id = 1;
+  string status = 2;
+  bool already_existed = 3;
+}
+
+message GetSettlementRequest {
+  oneof lookup {
+    string settlement_id = 1;
+    string idempotency_key = 2;
+  }
+}
+
+message Settlement {
+  string settlement_id = 1;
+  string source_service = 2;
+  string source_transaction_id = 3;
+  string idempotency_key = 4;
+  string status = 5;
+  string network = 6;
+  string transaction_hash = 7;
+  uint32 attempts = 8;
+  string last_error = 9;
+}
+
+message RetrySettlementRequest {
+  string settlement_id = 1;
+  string actor_id = 2;
+  string reason = 3;
+}
+
+message RetrySettlementResponse {
+  Settlement settlement = 1;
 }

ledger/v1/srv.proto

@@ -13,4 +13,8 @@ service GeneralLedgerService {
   rpc ListEntries(ListEntriesRequest) returns (ListEntriesResponse);
   rpc GetBalance(GetBalanceRequest) returns (GetBalanceResponse);
   rpc ReplayJournals(ReplayJournalsRequest) returns (ReplayJournalsResponse);
+  rpc EnqueueSettlement(EnqueueSettlementRequest) returns (EnqueueSettlementResponse);
+  rpc GetSettlement(GetSettlementRequest) returns (Settlement);
+  // Restricted operator command. Requires the configured x-admin-token metadata.
+  rpc RetrySettlement(RetrySettlementRequest) returns (RetrySettlementResponse);
 }

wallet/v1/internal_srv.proto

@@ -18,6 +18,11 @@ service InternalWalletSrv {
   // Calculate stellar pub-priv key based on national id
   rpc GetPublicKeyByNationalID(NationalIDReq) returns (PubKeyRes);
 
-    // Commission Logs
+  // Commission Logs
   rpc InitReferrerCommissionLog(InitReferrerCommissionLogIn) returns (base.v1.Empty);
+
+  // Authenticated administrative asset lifecycle. Delete is represented as
+  // deactivation/locking so referenced financial history remains intact.
+  rpc AdminUpsertAsset(AdminUpsertAssetReq) returns (AdminAssetMutationRes);
+  rpc AdminDeactivateAsset(AdminDeactivateAssetReq) returns (base.v1.StatusRes);
 }

wallet/v1/msg.proto

@@ -13,27 +13,6 @@ message InternalTransactionData {
   int64 transaction_id = 1;
 }
 
-/*
-   Federation
-*/
-
-message Federation {
-  int64 id = 1;
-  int64 user_id = 2;
-  string ed_public = 3;
-  string ed_public_hash = 4;
-  int32 status = 5;
-  string created_at = 6;
-  string system_wallet_address = 7;
-}
-
-message GetFederationReq {
-  optional int64 federation_id = 1;
-  optional int64 user_id = 2;
-  optional string ed_public = 3;
-  optional string ed_public_hash = 4;
-}
-
 /*
    Wallet
 */
@@ -59,15 +38,13 @@ message Wallet {
   int64 user_id = 2;
   int64 asset_id = 3;
   Asset asset_info = 4;
-  int64 federation_id = 5;
+  double balance = 5;
-  Federation federation_info = 6;
+  double frozen_balance = 6;
-  double balance = 7;
+  string updated_at = 7;
-  double frozen_balance = 8;
+  string created_at = 8;
-  string updated_at = 9;
+  string wallet_code = 9;
-  string created_at = 10;
+  bool accepted_terms = 10;
-  string wallet_code = 11;
+  bool is_locked = 11;
-  bool accepted_terms = 12;
-  bool is_locked = 13;
 }
 
 message BalanceReq {
@@ -374,27 +351,22 @@ message Transaction {
   string asset_code = 3;
   optional int64 from_user_id = 4;
   optional auth.v1.UserIdentityBasic from_user_info = 5;
-  optional int64 from_federation_id = 6;
+  optional int64 to_user_id = 6;
-  optional Federation from_federation_info = 7;
+  optional auth.v1.UserIdentityBasic to_user_info = 7;
-
+  double amount = 8;
-  optional int64 to_user_id = 8;
+  TransactionStatus status = 9;
-  optional auth.v1.UserIdentityBasic to_user_info = 9;
+  TransactionType type = 10;
-  optional int64 to_federation_id = 10;
+  string updated_at = 11;
-  optional Federation to_federation_info = 11;
+  string created_at = 12;
-  double amount = 12;
+  string tracking_code = 13;
-  TransactionStatus status = 13;
+  optional string trx_hash = 14;
-  TransactionType type = 14;
+  optional string from_public_key = 15;
-  string updated_at = 15;
+  optional string to_public_key = 16;
-  string created_at = 16;
+  double token_price = 17;
-  string tracking_code = 17;
+  BalanceChange balance_change = 18;
-  optional string trx_hash = 18;
-  optional string from_public_key = 19;
-  optional string to_public_key = 20;
-  double token_price = 21;
-  BalanceChange balance_change = 22;
 }
 
-enum BalanceChange{
+enum BalanceChange {
   NO_CHANGE = 0;
   INCREASE = 1;
   DECREASE = 2;
@@ -407,16 +379,14 @@ message TransactionListFilter {
   optional int64 id = 4;
   optional int64 asset_id = 5;
   optional int64 from_user_id = 6;
-  optional int64 from_federation_id = 7;
+  optional int64 to_user_id = 7;
-  optional int64 to_user_id = 8;
+  optional double amount_from = 8;
-  optional int64 to_federation_id = 9;
+  optional double amount_to = 9;
-  optional double amount_from = 10;
+  optional string tracking_code = 10;
-  optional double amount_to = 11;
+  repeated TransactionType type = 11;
-  optional string tracking_code = 12;
+  repeated TransactionStatus status = 12;
-  repeated TransactionType type = 13;
+  optional string from_date = 13;
-  repeated TransactionStatus status = 14;
+  optional string to_date = 14;
-  optional string from_date = 15;
-  optional string to_date = 16;
 }
 
 /*
@@ -686,7 +656,6 @@ message IPGConfirmReq {
   // string amount = 7;
 }
 
-
 message WithdrawLog {
   uint64 id = 1;
   Accounting accounting = 2;
@@ -773,7 +742,7 @@ message WithdrawIRTReq {
   auth.v1.InternalIAM iam = 1;
   double amount = 2;
   int64 bank_info_id = 3;
-  auth.v1.TFA tfa = 4; 
+  auth.v1.TFA tfa = 4;
 }
 
 message WithdrawIRTRes {
@@ -842,3 +811,54 @@ message ContractRes {
   string contract_hash = 4;
   string contract_content = 5;
 }
+
+// Administrative asset commands are intentionally separate from the public
+// Asset response. They contain the complete persistence-owned asset aggregate
+// and are accepted only by the authenticated InternalWalletSrv boundary.
+message AdminAssetInput {
+  int64 id = 1;
+  string name = 2;
+  string code = 3;
+  string issuer = 4;
+  string distributor = 5;
+  string network_code = 6;
+  string anchor = 7;
+  int32 decimal = 8;
+  string max_supply = 9;
+  optional string buy_min_amount = 10;
+  optional string buy_max_amount = 11;
+  string image = 12;
+  repeated string images = 13;
+  repeated string videos = 14;
+  string description = 15;
+  string url = 16;
+  string meta_json = 17;
+  bool is_active = 18;
+  bool is_locked = 19;
+  bool is_base_asset = 20;
+  bool show_if_empty = 21;
+  bool has_policy = 22;
+  bool has_whitelisting = 23;
+  bool can_buy = 24;
+  bool can_sell = 25;
+  bool can_deposit = 26;
+  bool can_withdraw = 27;
+  bool can_trade = 28;
+  AssetTokenType token_type = 29;
+  AssetType type = 30;
+  AssetStatus status = 31;
+}
+
+message AdminUpsertAssetReq {
+  AdminAssetInput asset = 1;
+  uint64 actor_user_id = 2;
+}
+
+message AdminDeactivateAssetReq {
+  int64 asset_id = 1;
+  uint64 actor_user_id = 2;
+}
+
+message AdminAssetMutationRes {
+  int64 asset_id = 1;
+}